Qryption SDK

PILOT

A retrofit SDK for post-quantum authorization

Qryption SDK is the pilot integration layer between an existing authorization system and Qryption Key. Its intended role is to create operation-scoped challenges, receive and verify ML-DSA proofs, enforce freshness and return a result that the existing IAM, PAM or control plane can use.

Current status: Published information; product availability remains limited to the private pilot where stated.

Private SDKHybrid transitionVerifier boundaryPublic package not yet available

Integration objective

The SDK is designed around coexistence. Organizations retain their identity provider, session controls, policy engine and protected service while adding a new proof to selected high-impact authorization paths.

Conceptual interface

challenge = qryption.createChallenge(operation, actor, policy)
proof = key.sign(challenge)
result = qryption.verify(proof, challenge)
if (result.valid) existingPolicy.authorize(operation)

This pseudocode describes the intended boundary only. It is not a public API contract.

Verifier responsibilities

  • Bind the challenge to actor, operation and expiry.
  • Reject replayed, malformed or expired proofs.
  • Verify the expected algorithm and version.
  • Return a deterministic result for policy enforcement.
  • Produce evidence suitable for the organization’s audit process.

Availability and documentation status

The SDK is available through selected pilot engagements. A public package, semantic version, API reference, SBOM and reproducible quickstart have not yet been published. Until those assets exist, this page describes the integration model rather than a generally available software release.

Private pilot

Evaluate the authorization flow in a bounded use case.